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DOCUMENT- IDENTIFIER: US 5629981 A 

TITLE: Information management and security system 



Abstract Text (1) : 

A closed loop, (networked) information management and security system which 
provides a secure, end-to-end fully automated solution for controlling access, 
transmission, manipulation, and auditability of high value information comprising 
an RFID transponder badge 302 and an RF reader transceiver 315 which is associated 
with a host peripheral or a network. The RF reader transceiver 315 automatically 
identifies and verifies authorization of the RFID transponder badge holder via a 
"handshake" prior to allowing access to the host peripheral. The energy generated 
by the transmission of the interrogation signal from the RF reader means 315 
provides a power source which is accumulated and then used to activate a 
transponder 304 response from the RFID transponder badge 302. The RF 
reader/ transceiver 315 writes the access transaction on either the RFID transponder 
badge 3 02 and/or the host peripheral database or the network controller. 
Alternatively, the RF reader means 315 may be associated via network server with a 
LAN, WAN, or MAN. Optionally, aii RFID badge 302a may be powered by an independent 
power source such as a flatpak battery 314. 

Application Filing Date (1) : 
19940729" 

Brief Summary Text (3) : 

The present invention relates to. a complete, end-to-end, automatic transaction 
control/monitoring method for transmitting, under variable and high levels of 
security, high-value business, personal, or Federal/military information, on a real 
or near real-time basis. 

Brief Summary Text (5) : 

A "secure document", or "secure information" is any document media (paper, disc, 
voice, video, etc.) containing U.S. classified documents or information (i.e. 
"confidential," "secret," "top secret," etc.), business-sensitive, proprietary 
documents or information, highly personal documents or information, and any 
document or information where limited and fully controlled/auditable access is 
desired. 

Brief Summary Text (6) : 

If an individual wishes to send a secure document via telefacsimile, for example, 
the current method of sending such a secure document is to call the receiving end 
and somehow make sure by voice communication that the intended, authorized 
recipient is standing at the other end at the receiving telefacsimile. Once the 
identity and proximity to the receiving telefacsimile of the intended recipient 
(mainly, via voice familiarity) is verified, the sending individual sends the 
document. After sending, the intended recipient provides confirmation to the 
sending individuals that the document was printed and received. 

Brief Summary Text (7) : 
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The same limited security procedure is followed when printing information from an 
electronic database to a remote conventional printer or other terminal device. 

Brief Summary Text (9) : 

It is noted that some islands of automation are available, but no end-to-end 
automation, with full auditability and real-time or near real-time control. Current 
systems such as a secure telephone unit ("STU") or STU facsimile machines assure no 
illegal tapping or eavesdropping but do not guarantee that the caller, recipient, 
or group is positively identified or is an authorized user or recipient. The 
positive identification and verification of authorization is a.lways perfor^ified 
manually. Thus, there is a need for end-to-end automation, with full auditability 
and real-time or near real-time control of the transmission of secure documents and 
information. 

Brief Summary Text (13) : 

Therefore, there is a need in the art to provide a cost-effective automatic room 
securit y which mechanizes the room access logs and thereby decreasing costs and 
increasing productivity. 

Brief Summary Text (14) : 

Exacerbating the foregoing problems, in order to copy certain secret government 
documents, only certain "secure" or tempest class copiers may be used so that the 
copier OPC drum may be cleared after copying and cartridges may be disposed of by 
only authorized personnel. Before these copies are made, a log sheet must be 
completed providing the details of the copying of the document. This creates yet 
another labor- consuming delay that increases costs and decreases productivity. In 
fact, access logs and usage data are generally maintained manually for secure 
facilities, information handling equipment, and users. 

Brief Summary Text (15) : 

Therefore, there is a need in the art to provide an automatic information 
management and security system which eliminates the time inefficiencies and waste 
associated v;ith manual logging and tracking of copies of high-value, secret a. 
documents . 

Brief Summary Text (16) : 

Underlying the entire system is the fact that it is up to the employees and 
security personnel to verify whether a particular individual has a secret 
clearance, badge code number, or some other indicia of authorization and 
identification . Therefore, to prevent improper access, manual or personal direct 
intervention is required to v erify both authorization and need to know in order to 
prevent improper and unauthorized transfer of secure documents. The verification by 
employees diverts resources from productive activity. The verification b y security 
personnel results in additional salary or expense overhead. 

Brief Summary Tex t (18) : * .. 

On a related matter, when an individual 's authorization is revoked and the 
individual gains unauthorized access to secure documents a security breach occurs. 
When this security breach is manually detected, it is impossible to inform all the 
employees and/or security personnel of the breach in a timely fashion in order to 
insure manual intervention. In a large company, timely notification and 
communication of. the changing authorizations of employees is relatively, impossible. 
This is because authorization has traditionally been carried in the form of a 
color-coded badge or the like. As a result, if the security of a document has been 
breached by use of an authorization which has been terminated or forged, an entire 
month or more could pass before the monthly DOD audit discovers the security 
breach. 

B rief Summary Text (19) : 

Therefore, there is a need in the art to provide an automated system for 
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continuously updating comprehensive information about the authorizations of 
individuals, and to prevent unauthorized access to secure documents at the time 
access is attempted (real-time control) . 

Brief Summary Text (21) : 

Therefore, there is a need in the art to provide an automated information 
management and security system which would be compatible with the present office 
technology, yet would be compatible with potential integrated office equipment, 
networks, and architectures of the future. 

Brief Summary Text (22) : 

The present invention provides an information management and security system which 
overcomes the shortcomings of the known systems providing various advantages such 
as instantaneous, multiple secure access (es) and minimizing the total "life-cycle" 
costs of managing "secure" information (from inception to destruction) utilizing 
present technology while being also compatible with new technology contemplated for 
the future. Also provides for transaction database services such as archiving, 
historic usage trends, transaction reporting/abstracting (user-definable) services. 

Brief Summary Text (24) : 

It is in view of the above problems that the present invention was developed. The 
invention is a closed loop information management and security system which 
provides a secure end-to-end and automated solution for . controlling access, 
transmission, manipulation, axjditability control of classified, mission-critical, 
high- value information managed by DOD, National Security Agency, othei* Federal 
Agencies, businesses, and individuals respectively. 

B rief Summary Text (26) : 

The present invention allows information management to be "transaction baHed. " /iJaoh 
automatic information transaction is bxiilt around a sequence such as a positive 
caller and recipient handshake and identification ("ID"), information lipgraide 
: write} record, configuration control (date, time, location and revision st^mp) , 
crecition of a transaction summarizing "communication data stream" (e.g. , ATlfi cell, 
frame) packet, destination ID, additional authentication (e.g., voice sic^n.-jture, 
biographical identification), send and receive date/time, location stamp, etc. The 
Iidst computer, network server or network controller maintains this "transaction" 
log automatically and dynamically maintains information authorization, usage, 
movement, and an upgrade/change log and foils any unauthorized access or tampering 
and doea any real-time reclassification or declassification as required. As such, 
this is a "transaction" based system that can be enhanced to add fault tolerance, 
redundancy, software -based access control algorithm creation, etc. to provide a 
flexible system. 

Brief Summary Text (27) : . 
Briefly, in its most generic sense, the present . invention comprises a read/write 
type radio frequenc y identification ("RFID " Radio Frecjuency, InfraRed or optical) 
means (transponder) and a radio frequency (transceiver) reader ("RF reader") means 
which is associated with a host peripheral or terminal device wherein the RF reader 
means passively and automatically identifies and verifies authorization of the RFID 
means via a "handshake" prior to allowing access to the host peripheral or terminal 
device or an information network. Preferably, the RF reader means writes the 
complete transaction via a unique "packet") on the RFID means, and/or the host 
peripheral or terminal or a network server device. In this fashion, the history of 
all transactions may be stored on the RFID means and/or host peripheral or terminal 
device. The present invention may be provided commercially in a "securitization 
kit" to upgrade existing equipment and information-handling facilities. 

Brief Summary Text (28) : 

In a second aspect of the present invention, the RF reader means is embedded. 
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plugged-in, connected or associated with the host peripheral or terminal device. 
Once a transaction is completed the RF reader means may record and write the 
transaction on the RFID means, and/or the host peripheral or terminal device, 
and/or a server database connected or associated with the terminal device. 
Optionally, the RFID means may further include stored biological data in ROM such 
as digitized voice signature, retina scan, fingerprints, etc. and other analog 
sensors (temperature, humidity, pressure, etc.) as well as commercially available 
physical "position" sensors such as Global Positioning System ("GPS"), coastal 
navigation system (LORAN) , or other satellite/magnetic based positioning system. As 
an adder! security feature the RFID means may include electronic bardwa-re ar'^/or 
software encryption means to statically and dynamically "encrypt" the authorized 
user identification code, information destination, transaction location, time/date, 
configuration control, and secondary biological user(s) identification. 

Brief Summary Text (29) : 

In a third aspect of the invention the RFID means may be coupled with an 
independent power source such as a battery. 

Brief Summary Text (30) : 

The RFID means may comprise an integrated ID, memory storage, and a communications 
device such as a Personal Computer card ("PC card") which conforms to standards 
promulgated by the Personal Computer Memory Card International Association 

("PCMCIA") having an RF transponder, mass memory, 2-way communication port(s) and 
input/output data means. Optionally, the RFID means has encryption device 

(Integrated Circuit) means to encrypt the output data. In addition, the RFID has 
unique biographical information patterns in Read Only Memory (ROM) for "static" 
information and ''dynamic" position, time, place, date information. . 

Brief Summ ary Tex t (31) . . 

In one pref 3:cr;?d embodiment , the RFID means is electronically similar to the . 
"bullet" or flat-pack card disclosed in (J.S. Pat. No. 5,053,774 to Schuermann et 
al . , which is hereby incorporated by reference, in its entirety. . 

Brief Summary Text (32) : ; i 

The RF reader. :neans is preferably an RFID reader module which compx'ises a plug-in 
PC card having a communication antenna, an RF module, a control module, and 
input/out da^ta .neans. Optionally, the RFID reader means comprise data pac::etization 
means, encryption means and bus control means. 

Brief Summ ar y , Text (33) : 

Thfi invent:L on provides an advantage by minimizing overall, life -'cycle- cost to manage 
high value information from its inception to the end of its usefulness. The 
invention also provides an advantage by allowing real-time, dynamic classification 
of information in case of a s ecurity breach or authorization changes (levels, 
users, time, place, etc.). 

Drawing Description Text (5) : 

FIG. 3a illustrates in greater detail a passive, user "read/write" cype RFID badge 
suitable for the user segment of the information management and security system; 

Drawing Descrciption Text (6) : 

FIG. 3b illustrates an "active" user RFID badge of FIG. 3a and a battery to enhance 
speed and range of the ID device and the transaction; 

Drawing Description Text (8) : 

FIG. 4 illustrates one transaction packet ization scheme suitable for use in said 
information management and security system; and 

Drawing Description Tex t (9) : 

FIGS. 5A and 5B illustrate a general hardware layout in a specific high-value 
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printing cartridge refurbishment application of said information management and 
security system. 

Drawing Description Text (10) : 

FIG. 6 illustrates a .specific application of said information management and 
security system utilizing technology from the cellular communications industry. 

Detailed Description Text (3) : 

To provide an overview, in its most generic sense, the present invention comprises 
an-RFID mean?? and a radio freqiiency reader ("RF reader") means which associated 
with a terminal device or other equipment such as a lock mechanism, wherein said RF 
reader means automatically interrogates said RFID means which responds by 
broadcasting identification so that said RF reader means identifies and verifies 
authorization of the RFID means and either stores a record of the transaction or 
communicates a record of the transaction to a server database prior to allowing 
access to the terminal device or other equipment . 

Detailed Description Text (6) : 

The user segment is comprised of individuals wishing to send and receive 
information such as secure documents. For the user segment, the present invention 
requires intelligent identification means, preferably RFID means as stated above. 
The RFID means may be any device which allows positive identification of the wearer 
and which provides an ability to communicate with the single or multiple 
host/network equipment (s) or facility segment (s). 

Detailed Description Text (7) : 

The term "terminal device" is broadly defined as any type of electronic equipment 
or hardware, e.g. printer, copier, pager, personal computer (PC), facsimile , 
inachine, work stations, video, terminal, telephone, VCR, x-adio, electronic -ioor 
mechanism, trass memory storage device, data storage device for storing log data', 
modem, etc. Preferably, the RF reader means provides identification se curity and. 
then writes the transaction on the (portable or fixed) RFID means and/or a server 
database connected or associated with the terminal device or other equipment . v 
Further, the history of all transactions may be rftpred on the RFID means and/orr- 
3erver database. The present invention may be provided commercially in a 
■'securitization kit" to upgrade existing facilities . 

Detailed Description Text (8) : 

In the preferred embodiment, such identification means is preferably in the form of 
a user RFID badge transponder (hereinafter " RFID badge" or " RFID transponder") or 
securit y badge. Such an "RFID transponder" is an active or passive read only or 
read/write transponder which operates via radio frequency means, infrared means, or 
other optical means at a low, high or auto- frequency . 

Detailed Descr iptio n Text (9) : 

Under the present invention, the user segment, at least a group of individuals, 
wears an intelligent, passive user RFID badge. It is noted that the present 
invention does not require additional inconvenience on the part of the user segment 
as wearing dumb ID badges is a fact of life in the defense and business world 
wherein security clearances are written on badges manually. Thus, the user RFID 
badge aspect of the invention is an improvement over current technology because 
security clearance information need not be physically visible for the public co 
read . 

Detailed Description Text (10) : 

Such a user RFID badge is illustrated in FIGS. 3a and 3b. The uses of each type of 
'^ser RFID badge are more fully set forth in examples 1 and 2 . Both user RFID badges 
(passive) shown generally at 302 and 303 (active, with battery) commonly include a 
Personal Computer card ("PC card") which conforms to standards promulgated by the 
Personal Computer Memory Card International Association ("PCMCIA") having an RF 
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read/write transponder 304, application-specific, electronic mass memory 308, 
transponder antenna (screened on) 306, and input/output data means 312. Optionally, 
the input/output data means 312 includes unique encryption (hardware or software) 
means 313 to decrypt input data and encrypt the output data/packets etc. via a 
specialty crypro Application Specific IC (ASIC) in the form of a random number 
generator chip or utilizing hardware or software "crypto keys" for information/date 
encryption which is user-definable. Optionally, the user RFID badge 310 can also 
store a person's unique biological digitized data in Read Only Memory ("ROM") 310 
for enhanced authentication purposes, e.g. digital voice signature, digitized 
f ingerprini"? or djciity7.ecj^. ^ye '^etina prints, etc. . 

Detailed Description Text (11) : 

With reference to FIG. 3b, the user RFID badge shown generally at 3 02a uses the PC 
card 303 of FIG. 3a and is physically and electrically joined to a flatpak battery 
power source 314. Applications specific to this user RFID badge 302a are more fully 
explored in Example 2 . ' 

Detailed Description Text (12) : 

With reference to FIG. 3c, the equipment or facility segment of the present 
invention requires an RFID reader means which may be of plug-in or built-in type. 
The RF reader means is defined as a multi-f requency , range -adaptive radio frequency 
transceiver preferably in the form of an RFID reader module shewn generally at 315 
which comprises a plug-in PC card 317 having a control module 316 for controlling 
an RF module 318 connected to a communication antenna 320, and having input /output 
data means 322. Optionally, the RFID reader means comprise integrated circuits 
(ICs) such as data packetization means 321, encryption means IC 324 and biis control 
laeans 326 possibly connected vi:^ iriodem (wired or wireless) to the network server. 

Deta iled Descr i ption Text (15) ; 

The network segment requires some type of host hardware to handle rand .vianage the 
inf orPTLation and securit y system. The host hardware functions to authenticate 
authorized user IDs, track roaming user locations, and control configuration of;'::he 
:-jystem as ^vell as revisions in any aspects of control . The network segment also can 
perform compression or decompression of data, control local area network and wide 
area network applications, provide a "throttle" in that xt could provide a VHriable 
transaction ''packet" creation/ transfer rate of control, provide encryption, means 
^nd provide multi-user and equipment daisy chaining (add/drop, change priority, 
etc.) . In its management aspect, the network segment can provide, functions such as 
billings, generate reports relating to general usage trends, provide an audit-trail 
of each/user-defined transaction, control classification and reclassification of 
both documents and authorized users, provide point-to-point or point-to -multipoint 
"broadcast" transactions, provide secure communications for roaming users, and 
other application specific features, such as an automatic/date/time/location stamp 
for every transaction wherein the location stamp utilizes dynamic code(s) su'rh as 
GPS location code or "variable" facility codes f:or added security .. 

D etailed Description Text (17) : 

The unique portion of the. present packetization scheme is that the location stamp 
Ghowing the authorized origination and destination (s) of the request is encoded and 
encrypted. This aspect is critical in the sense of preventing unauthorized entry in 
a control area. If a person attempts unauthorized entry by using a location code 
obtained by copying airborne transmissions or stolen badge, .etc., access is denied 
first because :che person is unauthorized and second because an authorized user also 
has a limited number of locations in which transactions are authorized. Information 
relating to the limited number of authorized locations is stored in a look up table 
of the host co^nputer or the network server and can be dynamically updated as 
required for additional security . 

Detailed Description Text (18) : 

It should be emphasized that in FIG. 4, Authorized User ID, Destination, and 
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Recipient IDs are all encrypted, even in the header, using a random number scheme 
described below, or some other similar scheme. Thus, even if unauthorized personnel 
obtains the transmitted packet, the unauthorized personnel would be unable to 
decrypt or decode the packet to obtain the real code, and even if the real code is 
obtained, the host or network server could dynamically change the location code on 
an everyday basis to foil unauthorized copying or pirating of the code. 

Detailed Description Text (20) : 

With respect to encryption of data, a decoding or decryption approach attempted by 
.unauthorized upers of RF; };)roadcast user ID/voice signature or other per*^on^lly 
unique data is the capture and duplicate approach. One way to combat this approach 
is to deploy a " random number seeding" algorithm to continually and very frequently 
change the "ID data". 

Detailed Description Text (21) : 

This encryption algorithm may be embedded in the transponder device (RFID or 
Infrared or optical ID) itself or in a separate encryption chip or integrated 
encryption/packetization chip. A short series of transmitted transactions below the 
RF equipped "object" under protection and the other RF technology identification 
device could be as follows: ##STR1## 

Detailed Description Text (22) : . 
y;t is noted that the user identification code may contain authorized location 
codes, cpded by simple assignment or the Global Positioning System ("GPS") 
convention of latitude and longitude, which may be merged into the user 
identification code itself and may be changed dind/or encrypted. As a resulr, both 
Tjtandinq .data* and dynamic data exists in the identification code, the mix and 
jTreqaency of change of which is dependent 'jpon the level of security desired.. This 
dynamism is critical to maintaining extx'emely high leyfel&.of. secu rity in the ^ 
::y3tem. In the event the user identification code carried by the RF-ID badge is 
copied in order to gain unauthorized acces s to , information from a location 
different i'rom chat originally authorized (e.g. ,:i computer hacker, misuser/abuser 
attempting acce ss to secure information or documents via modem), this access ^^ would 
':e denied. This packetization scheme combining static code and dynamic code vhich 
is controlled '.nd changed according to some predetermined alqorinhm by che. 
controller or the network server based on the requirements of the using community 
appears unique ''i^' past schemes appear to take static data and recombine the data 
■'on the f ly . " - 

Detailed Description Text (24) : 

The, badge system also provides enhanced security under the present invention. If an 
individual's badge is stolen, the individual simply calls the network management 
.peopla regarding the stolen badge. The network management people drop the badge 
from the authorized user list. Therefore, the present invention can provide rep.l- 
time configuration c:ontrol and security control. 

detailed Description Text (25) : 

The equipment or facilities segment may include an application specific memory 
(ASM), which is preferably a mass-memory plug-in card, which is not absolutely 
required for operation of said information management and security system. A 
&uibable card would contain at least forty megabytes of storage capacity and would 
be characterized by multi-page, user-definable, mapping/ layout , input/output, mass 
memory devices of silicon, gallium arsenide or a hybrid material. This additional 
ASM could be used to store additional transaction history data as desired. Further 
uses of this card are set forth in greater detail below. 

De cailed Description Text (26) : 

The present invention also has applications in paging and/or telephone transactions 
wherein a central office telephone switch (wireline or cellular) has the present 
invention installed in the switch. When a secure voice transmission is required, a 
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central office switch may store an individual's voice signature in its database for 
comparison and verification of identity . 

Detailed Description Text (27) : 

With respect to wireless telephonic transactions, central switches have base 
stations so that with a cellular phone, repeaters transmit the cellular phone 
signal to the next cell. The cordless/cellular phone itself and/or base station 
equipment can have RFID readers of the present invention installed as well as other 
authorization data such as digitized voice bio-signature data. 

Detailed Description Text (31) : 

Specific applications exist utilizing a user RFID badge having no battery. Such a 
badge is illustrated in FIG. 3, wherein a badge comprises a PC card having a 
read/write transponder, a flat antenna, application specific mass -memory, and a 
chip performing input /output functions, preferably including an encryption scheme. 
Such an RFID badge may be patterned after the "bullet" described in the '774 
patent. Because this badge has no battery, its transponder is of limited range. The 
user RFI D badge derives its power by capturing the energy from RF signals generated 
by the interrogating RF reader module, and, once a predetermined amount of energy 
is stored, transmits* a coded RF signal in a short transmission burst. This method 
of RF signal transmission is more fully discussed in the '774 patent described 
above. This badge integrated RFID / communication badge is approximately the physical 
size of a regular credit card. A second type of user RFID badge discussed more 
fully below in Example 2* adds a power source such as a battery. 

De tailed Descri pti on Tex t (32) : 

:£t is: noted thai: either cf the. a.bove- described user RFID badges could also include 
a biological or voice signature in ROM. This information stored in ROM oouid'also 
■;e encrypted. All encryption rrovld 'o? per formed, using any of the : -incrypc ion means 
cui-rently -ivailable on the, .nai't:::'G , biit. preferably based on a ra ndottr nuraber ;-T;.;h'i,ne :. 
for complete p ecurlty . . ■ - 

O eta ileg Descrl ption Texc ;3--i) • ' ' 

yj. G . 2 i 11 u 3 1 r a c c J a c e na r i 6 i ii w h i c ; i t h e :.'e i s . ?i user RFID. 'o adg e :\ a . t he' \ is t= t ' : 
cegment, and an RF reader that reads che transponder of" the RFID badge in the - . 
■;;qjroment segment. The equipment has a RF reader embedded or plugged into, for 
example, fax Machine. As person wearing the user RFI D badge approaches thei fax-, 
machine, the RF reader will read the RFID badge when it comes within reading range, 
probably a mefer or less (for passive) .When the person's RFID badge is read, the 
person's R.FID badge makes an automatic handshake with the equipment or faci.licy 
se^finent so thavv the equipment,. hV're . a . f ax machine., recognizes that proximate person 
corresponds to the identification number on the badge. 

Detailed De ; 3cription Text (34) : 

As a concrete example embodying PTG. 2, secretary A who is attempting to send a 
secure document to secretary B, does not have to wait for secretary B to be present • 
befo?:e the document is . placed in the fax machine . As secretary A approaches "■.he fax 
machine, the RFID reader interrogates secretary A's user RFID badge and determines 
the identity of secretary A. When secretary A attempts to send the secure document, 
the -'ax machine (the host peripheral) initializes the information transfer request 
and provides configuration control in the form of a date, time, and location stau.p . 
The fax machine checks in a look up table (located either in a module in the Viost 
peripheral /fax machine or by sending a query to the network server) t:o validate and 
authotii^e the information transfer request. 

Detailed Description Text (35) : 

Because the host or network, automatically has stored a database of authorized 
peopl-. who . are authorized to send facsimiles or handle secure facsimiles at -his 
location, the host or network will verify that secretary A is authorized to send a 
secure document via a handshake between the RFID reader and secretary A's RFID 
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badge . 

Detailed Description Text (36) : 

Once secretary A sends the document, the network does not transmit the secure 
document to the receiving facsimile machine. Instead, the network will store the 
document electronically in the buffer of the receiving fax machine or at the 
network buffer. At this point, the network can send an indication to authorized 
secretary B or other authorized recipient (s) at this location that a secure 
document is waiting to be retrieved. This indication can come in the form of a 
light appearing on ^hf* fax machine.- =i flpj^hing l.icht on her telephone, or a note on 
the computer screen, or a combination of any of the foregoing. This aspect is 
critical to security because the secure document is not automatically printed when 
secretary B is not present. At secretary B's convenience, secretary B will go to 
the fax machine. As secretary B approaches the machine, when proximity to the 
machine permits, a handshake between secretary B's. fax machine reader and secretary 
B's RFID badge will occur. The fax machine will recognize that secretary B Ls the 
authorized recipient and has a secure document ready for receipt. At this point, if 
:-;ecretary B's RFID badge or the system utilizes the additional biological or voice 
ssignature security feature, the facsimile machine may ask secretary B to say '^he 
name or provide a finger for reading or an eye retina for reading. This additional , 
step guarantees that the person wearing the badge is in fact secretary B.- .\fter 
identification is verified, the fax may once again revalidate with the network 
server the authorization of secretary B to receive the fax and the fax is printed 
and all transaction details and records are updated automatically. 

Oetail ed Descripcion Text (41) : 

:'5p3cifi:: applications of the present invention lixist iitiliziuv a user RFID b^dge . 
Having an independent power source. iThus the user RFID badge! of the present example 
comprises a PC card having a read/write transponder, a flat antenra, application 
..'pecif ic iP.ass-mcimory, and a chip -performing input/output f uncticrr.^ prefex-ably 

'.acluding an encryption scheme, and an independent power source. While a user RF:i;^D 
Asadge having nn iviiependent power source has all the specific applrcat Lons * ' 

:.e;^ -bribed in .Example 1 above, addition of the independent power ^o?jrce would;.; ■>reate 
:vmpv.\:7emei.'i--: in'- those specific applications (i.e. speed, improvr^c*, .-eadin^j ::ca^^^ 
..nd creates additional applications described below. - . ; 

• ietaile d . Oescri^cion Text . (42) : . ' - j 

\ suitable power source is a battery, preferably a common flatpak nattery as t;;hown 
...til 'i"'IG , ?. This batti^ry is physically glued or welded and electronically connected 
:o the user RFID badge. The addition .c; f a battery transforms the badge into an 
^•.ctive, long-range., .fast write transponder. Such a battery v^ould increase the range 
:>f the transponder up co five times that of the original battery. In addition, sUch 
;•• battery would enable the "read/write" processes in the badge to function fr-.ster. 

V/etailiiid Description Texc (43) : . 

:.'he security badge itself could also be a pager. The badge could be secured 
physically aiiii electronically to a pager that is r::arried on the belt or a pocket. 
Accordingly, the pager would incorporate security features not found in the present 
^^iaging system. ^ 

I'etailed T:escriptiun Text '.AS).: 

As alphanumeric pagers are more prevalent, and two-way paging becomes a yossibility 
in the near fixture, the present invention provides a security feature which all ov;^ 
tjecure messages to be sent without worrying whether an unauthorized person had 
access to the page. One of the keys to secure messaging is encryption software 
v/hich is laid on top of the conventional signal. Encryption (selective polling) 
allows a sender to control who receives a secure page and, more importantly, who 
does not receive i?ame. 

Detailed Descripcion Text (46) : 
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A powerful aspect of the present invention relies on the ability of the user RFID 
badge to provide a location stamp. Because a user RFID badge with a flatpak battery 
has a fairly long range, any secure document carried by an RFID badge carrying 
person into an unsecured portion of a building can be tracked. Specifically, if one 
walks away from the document in one part of the building to the next, and if the 
document is not re-registered automatically (via another RFID reader means) , then 
alarms, flags designed to go up in the network, will prompt security measures to 
check on tho status of the document. This can be accomplished by creating (manually 
or automatically) an electronic message or page, and sending it over the ne{:work to 
t:he recipi.ent pool.. Accordinqly '::on*:rol over vn--:oi]s r'ori.rments is virtually real- 
time in determining whether a secure document' is in possession of the authorized 
user or is aLternatively replaced. 

Detailed Description Text (47) : ^ 

Another aspect of the present invention is that authorization codes, statuses and 
user-sets for access for certain locations may be dynamically changed. 
Specifically, when a person is working on a isecure project for an extended period 
or specif Ic . r^eTiod of time, wherein the person will have to travel frcn his or ",ier 
home building A to buildings B and C or other remote authorized locations for an. 
extended period of time or fixed period of time, the authorization for the. person's 
entry into buiJ.dings B and C can be changed dynamical.ly to allow access to both the 
biiildings as well as any equipment therein. When that time expires, or the priuject ^ 
is completed, the network automatically cancels the person's authorization to. enter 
buildings B and C. It should be noted that global positioning system technology may 
be used to enhance the security system as rm- added feature in order to avoid having 
:o cr.^:ate additional partitions or walls or other means of b^locking access, within a 
;;;arti...^:^Aar bn.lldiiig. ^ . 

J '; e t a i 1 e d D e s a ^ i j ^ c ion s. - = x t (48) : 

Addeii, applicaticns Of. *",he user. RFID badge or che prebc;:it 3;-:ciiaple of- Vhe. prebeu.c' . /; 
.i.nv(f/rij:ion: is that inulciple visers in a given geographical locus (e.g. a building)" 
::jay "vc Miiisy chained" mea;iing ,\s^ociated so that multiple.u^er:'5 may receive a 
•-ommon message. More specifically, transponders ctssoc: -ced .vith each of th^ijUser . 
ViFID badges, coi^ld b'v;'onfigured in a c^aisy rbaii; , The effect, of ':his is that^^^^'-er^': 
viiiue message comes relative- to one user, the same message can be broadcast;:: or 
r.imulcast "^he other uders. The rationale behind this type of conf igurat.J oa, of \ 
';.ranspbnde::=: is for purposes of convenience and f ective rrommunirat ion • ' . : 

'tetailed Description Text (50) : •> ' 

"i^ecause the pr^esent :uiyention is trarxsaction based, ^•f'ne system may be" used to 
vrovide s ecuri ty services to an equipment or AMiilding which oan be .billed V.v Llie 
u^er onr a~"per-use" 'iiasis . Accordingly, a summary of transactions may nlao -be used 
j:or billing purposes because each securit y transaction could potentially also Se i 
toll producing or toll accounting sitiration.. Additional services which rbuld alsc 
be tc;ll produciiv.g '/70uld be options such as point-to-podnt transaction, multi-^ast 
or broadcast transactions, or roaming features. 

Detailed Description Text (54) ly. 

Other' applications include, but ar<e not limited to integrated user, information ana 
i*^quipment or asset .control; equipment calibration control and auditability control; 
>:i professional (lawyer, doctor, accountant, etc.) user information s ecurity ?ystem; 
information- management and security in the phanurcy field as mandated by the FDA 
(e.g., controll^ii ".substance, prescriptions tracking); security over personal 
pi-operty; and auditabality and conf igurat ici control over the testing of products, 
production and test equipment t:^ track UL, safety, OSHA, quality ,. FAA, FDA, tc. 
compliance . 

.Deta iled Description Te xt (55) : . . 

It is noted that the above -disclosed information management and securit y system of 
the present invention may be provided commercially as a service on a "pay-per-use" , 
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i.e. transaction, basis. 
Detailed Description Text (59) : 

In order to prevent unauthorized refurbishing, this unique application of the 
present invention requires three main elements: (1) an RFID reader 508; (2) an RFID 
transponder 512; and (3) an external mass-memory 516 for storage of transaction 
data in the network ser-ver 502, peripheral 506 and/or in pluggable integrated 
circuit cards ccmmonly known in the industry as PC cards. The RFID reader 508 may 
be embedded or plugged into the host printer/copier/f ax/scanner and/or the 
refurbishing equipment. - 

Detailed Description Text (60).: 

With respect to an electronic, secure, tamper-proof transponder, such a transponder 
identification device 512 must be imbedded or attached into an insertable, reusable 
and disposable electrophotographic printing cassette 510 and/or "after market" 
toner/developer dispensing containers for further control. The transponder 
identification device 512 is preferably one of the following types: contact type oi* 
close proximity t>pe (e.g., a Dallas semi, IC-type button or proximity "read" 
relay); a contactless, RFID device (e.g., a '•TIRIS" read-only, read/write and- 
programmable -type device; with a built-in time, date and place stamp capability and 
resident read-only memo/mass -memory) . . 

Oetailed Description Text (61) : 

The RFID transponder device 512 may also have a built-in temperature, humidity, 
oxygen, smoke particle, or ozone sensor, shown at 514, or ^ peparate . environmental 
ansor, not shown, embedded in the cassette 510 to track humidity or temperature 
.onditions In storage, transit, and in actual use which would determine if !-he 
warranty", is still "''alid for the printing toner/cassette , . Another type of pviysical 
ideht Liiication device is a read-only type having a bar-code, dot-code, or a laser--; 
- "fadable label. 

.•-;etai.'''e: d ITesc riptio n Text (62)-; • , . .: 

.he . raV.iond t-*ystem element required to facilitate pay --.^er-ui^^e transactions; is;^^^^ 
.-FID reader device sp8, 522. A i-3.uitable RFID reader device 508, S22^ c^ads the; 
electronic identiiication code(s) for the user, refurbisher, third-party sepricf^^ 
provider, etc., along- with the toner consumption, usage, pages printed or 
reproduced,, -ransmitted, refurbishing cycles, software or .algorithm conf iguratipn, 
ViVliaing rate, -etc. type business transaction data. The foregoing information As 
Jtoref^. on the cassette RFID device 512 itself and/or a plug-in mass-memory card 516 
.in the- peripheral .^'i6 . This RFID reader device 512 is preferably embedded in the 
following equipment elements: (1) system peripherals such as printers, copiers, 
i^acsimilec machines, scanners, etc.; (2) printing cassette refurbishing/recycling 
:quipment 518; (3) portable, hand-held readers, notebook/sub-notebook -romputers, 
::erminals; (4) portable pagers; and (5) ?ortable Personal Digital Assistarts (PDA) 
..'•or integrated computing/communv eating . 

d etai le d Desc rip tion Te xt (74) : 

In ^'IG. 6, this specific .applicacion is illustrated. In use, a sender is equipped 
v/ith.an RFID badge 618. RFID badge 618 may be of the type discussed earlier in 
I^Jxample 1 and in Example 2; therefore, RFID badge 618 may be independently powered 
or may accumulate energy from inrerroqation transmissions from portable, equipment - 
I'^mbedded RFID reader 602. 

i'.^etai led Descript io n Text (76) : 

In use, a sending individual equipped with RFID badge 618 is passively identified 
and activated (IDed) via Reader ( RFID ) in multi-media device 610. Upon activation, 
RFID reader 602 performs a handshake sequence with RFI D badge 618. This may be 
.iccomplished by a plug-in card type RF ID reader 606 embedded in the fixed base 
unit/charger, wherein RFID reader 606 is similar to that described earlier in 
^"ixample 2. Local host or server stored "digital voice signature" verification and 
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authorization can also be deployed to provide additional security over the 
automatic RFID handshake sequence. 

Detailed Description Text (77) : 

During the handshake sequence, plug-in card 606 may consult a local look-up table 
contained therein; alternatively, plug-in card 606 may verify the authorization of 
RFID badge 618 by communicating via antenna 604 of controller unit 603 to 
transaction data base 620 maintained in LAN network equipment types via wired or 
cellular communication. Transaction data base 620 is a generic term which 
'^n.comT?asses a network server/best or centra."! offi'^e ?w:t'>^ of p '''^r^l ^,elephone 
company, or a base/relay station within the lobal wired iPSTN) or cellular 
telephone network or the like. Transaction data base 620 verifies the authorization 
of RFID badge 618 and transmits same via cellular technology to controller unit 603 
via controller unit antenna 604. Upon receipt of authorization, controller unit 603 
allows multi -media device 610 to be activated. 

Detailed Description Text (78) : 

The sender, now authorized, inputs the receiving individual's phone number or other- 
identification to initiate a communications link with a receiving individual 
wearing RFID bade 622. 

'd etailed Description Text (79) : . 

n"'o establish the link, controller unit 603 passes the request to transaction data 
base 620. Transaction data base 620 evaluates whether sender with RFID badge 618 is 
. uthorized to communicate with recipient with RFID badge 622. Once authorized, 

ransacticu Jata base 620 establishes a link with receiving mult i-raedia levices, 
:..l).own .^jenerally at 624. ■ ■ 

?.ret aiied Descr i ption ' :'ext (Bl) : - -.^ v 

len receiving .r ilTi-media device rings (or beeps, or a light bliukS', etc.) '.w 
, , ^cipderit ::j^x-'ing Ri'^ID badge o22 -ictivates multi^media device 624 . As- •i-.'-.n as • ' . 
'■:c^^ MID badge 622 activates n.ulti -media device 624, at'tplug-xn card or 

-racier mod\:le SOS of receiving controller unit 603 interrogates RFID badqe'^^^2 
v^irify that the inteiided recipient is indeed "receiving, che :;i.:TTriiinica*: ion . ; ::|;:.r 

^■tail ed Descripti on Text (82) : Ot- . 

' V^ntroller unit 603 may also be equipped with ;i -GPS positi o>n card 6a8 . - should^ 

(go^be noted that, an additional level^ of security may be afforded iy use of ^f^**5 
>^i3icion card 608 shown inserted into controller 603 although it tui^ a Itt -amatively 
;>i:^t;:xed to FAulti -media devices 610 and 624. Position card 608 nay Jj?e ■interrogated 

V or otherwise programmed to automatically broadcast or transmit .^socation 
.-itiormation to) transaction data base 620 to verify whether either t±ie sender or 

^c/pient is in an a\ithorized, pradetermined, or dynamically prograonmed Location. 

'- ■■t aile d Descr iption Text (36) : ■ ^ '-"^ " . 

r^iv varioui-tmodif ications could be made in 'jhe constructions and met^iods herein 
, ;;7.s::ribed and illustrated without departing from the scope .-jf the invention, it \uS. 
v;itended that all matter contained in the foregoing description or shown i.n the 
:/::companyi"ng drawings shall be interpreted as illustrative rather than limiting. 
:-;Dr example, the concept presented in example 2 may be extended to '^t rack hazardous 
:;aste (nuclear, chemical, medif.al) products by attaching a user RFID badge waste- 
handlers, equipments to each hazardous waste container to verify proper storage, 
vapyement, handling, and disposal. Eliminating the "person-in-the-loop" is 
:\dvaiv>.ageou3- because it reduces :':he potential for inadvertent exposure imile ' 
.providing continuous surveillance over a large number of hazardous wast3 storage 
container^. In another example of the scope of the present invention, it is 
-::pritemplated that an application-specific memory (ASM) device may also be 
.Incorporated into the system to let the user, CEM, or service-provider collect data 
in unique formats, frequency and storage patterns so as to minimize the data 
•' access time" and optimize output formats for statistical analysis purposes. In yet 
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another example, it is contemplated that the foregoing Example 4 may be extended to 
video-phone, video-conferencing, and voice-mail systems. It is further pointed out 
that the present invention could eliminate the need for an individual to remember 
passwords prior to logging on to a computer station by performing security 
functions transparent to the individual. In yet another example, FIG. 7 shows a 
computer managed system currently under development by the Microsoft Corporation. 
The present invention may be utilized in conjunction with the planned system 
disclosed in FIG. 7 to provide a comprehensive information management and security 
dimension consistent with the various embodiments of the present invention 

^'T'^ribed above. Thus, the breadth and scone of .pre^ev^ i r>yr^nf i on- r^V"^;!.) n'^t be 
limited by any of the above -described exemplary embodiments , but should be defined 
only in accordance with the following claims appended hereto and their equivalents. 

Other Reference Pub lic ation (9) : 

Standard Register, Advertisement- -High Tech Document S ecu ri ty Video, Jul! -Aug. 
1993. 

CLAIMS : 

An information management and security system comprising: 

c\ transponder heaving an identification code, said transponder including a charge 
itorage element for storing energy received from an interrogation signal, said 
-v.i-ansponder subsequently using the stored energy to power the transmission of said 
identification code; 

:;\n transceiver to send said interrogation signal to said transponder and t;o .."eceive 
'•■aid identification code from said transponder; : . ^ ' ; 

first t;Trminal device connected to and activated by said transceiver; 

■dost network element in ;:ommunication with said transceiver, said= host netwcrk: 
Tement "laving authorized, identification code's stored in ^nemory, whereby .-aid hosc 
^;::twcrk element compares the identification of said transponder with the jtuthorizea 
dentif ication codes stored in memory; and 1 • , . 

: -second terminal device connected to said host network element fori: communicating 
*:.th .^said 'lirst terminal device after said host network element has'/ verified '*"he 
. iithori zed i dentification of said transponder. 

An information management and security system as set forth in ei&im 1, wherein 
./IpL.' to allowing communication between said first terminal device vand said second 
■.L-;rminal device said transceiver interrogates said transponder which causes said 
'.ransponder ':o respond by broadcasting identification signals so -hat said 
•ransceiver receives' the identification signals and communicates the identification. 
..vignals to said host network element which authenticates the authorization of said 
/ransponder by comparing the identification signals with said authorized 
r -.entif ication codes stored in said memory of said host network element. 

information management and s ecurity system as set forth in claim 1, wherein 
'^aid transponder comprises a Personal Computer card having an transponder, masF 
memory, and input /output data means. 

: . . An information management and security system as set forth in claim 3, wherein 
-aid mass memory of said transponder is application specific memory. 

. Information * management and security system as. set forth in claim 1 wherein said 
transponder comprises an RF transponder. 
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6. An information management and security system as set forth in claim 3, wherein 
said transponder further comprises a battery power source. 

7. An information management and security system as set forth in claim 1, wherein 
said transceiver writes a record of the transaction on said transponder. 

3. An information management and security system as set forth in claim 3, wherein 
said transponder further comprises encryption means to encrypt signals emitted from 
said transponder. 

9. An information management and security system as set forth in claim 8, wherein 
said encryption means comprises a random number seeding. 

10. An information management and security system as set forth in claim 9, wherein 
3aid encryption means further comprises an encryption chip. 

An information management and security system as set forth in claim 3, wherein 
aaid encryption means further ::omprises an integrated encryption and packetization 
chip. 

12. An information managem.ent and s ecurity system as set forth in claim 1, wherein 
3aid transporrder stores unique biographical information of a user of said 
r^ransponder ii5 Read Only Memory. 

■/.T- An information management and security system as set forth in claim 1, wherein 
• aid 'crai';-^:-viver connected to 3aid first, terminal device writes the transaction on 
ri^iA singular transponder . " . 

.^n Information management and s ecurit y system jet :\crth in cl^iim '1-,.; where in. 
■-.aid transceiver connected to said first terminal . device stores a record, of r.he 
-.irarsiT-Ction in memory. 

;\n infozmac:;un iTiavvr-igement end security system as set forch in claim 1, /.n. -; - V.a'I 
i & t > n ns ce i ve r c onne c t ed ■: o , v ai d .f d r s t t e rmi na ]. d ^ vi c e i t e s t he -z ran s ac c ;i '^ii :»n 
:;aid host network, element. 

An inf ormr:V:ion management and security system as .^et forth in claim 1,. .vliereT.n 
c;. rf-vjuest for. a transfer Gf data between said first terminal and said f^econd. ' 
"=irminal is automatically st Lumped, with* the location, date and time .of the .*eqi.iesc 
sUid ^tct^d iri 'vi^mcry in said transceiver. - . < V ^ ./ 

1.7. An i^ilformation management and security system as set forth in claim. 1/ wherein 
:ail host network element records the identification communicated by said 

.;::car;r;conder . 

An in^'t^rmacion mana^em'ant and >-3ec.t irity iiystem as set forch. in. claim .'.herein 
.aid tran3ponder communicates wd th. an environmental sensor . 

An iu-^;9rmation management- and i3ecurity system as set forth in claim 18', wherein 
.-'aid- environmental sensor detects an environmental condition selected from- the 
aroup consiscing of humidity, temperature, ozone, Oxygen, and smoke particles. 

;;•'). An information management .ind se c urity system as set forth in claim 1, wherein 
;;aid first terminal device is selected from the group consisting of- printers, 
copiers, pagers, personal digital assiscants, personal computers, dumb terminals, 
v.orkstdtions, facsimile machines, telephones, cellular phones. Video Cassette 
:;<ecorders, radios, electronic door mechanisms, mass memory storage devices, data 
storage devices, automated teller machines, or modems. 

21. An information management and security system as set forth in claim 1, wherein 
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said second terminal device is selected from the group consisting of printers, 
copiers, pagers, personal digital assistants, personal computers, dumb terminals, 
workstations, facsimile machines, telephones, cellular phones. Video Cassette 
Recorders, radios, electronic door mechanisms, mass memory storage devices, data 
storage devices, automated teller machines, or modems. 

22. An information management and security system as set forth in claim 1, wherein 
said host network element is selected from the group consisting of network servers, 
network controllers, central office switches, or base relay stations. 

23. An information management and security system as set forth in claim 20, wherein 
said second terminal device is selected from the group consisting of printers, 
copiers, pagers, personal digital assistants, personal computers, dumb terminals, 
v/orks tat ions, facsimile machines, telephones, cellular phones. Video Cassette 
Recorders, radios, electronic door mechanisms, mass memory storage devices, data 
storage devices, automated teller machines, or modems, 

24. Information management and security system as set forth in claim 1 wherain 3ald 
transponder comprises an optical transponder. 

25. Information management and security system as set forth in claim 1 'vhe?;ein said 
'zransponder comprises an infrared transponder. 

16. Information management and security system as set forth in claim 1 andvfurther 
;:omprisirig a third terminal device connected to said host network element for 
communicating with said first terminal device after said host network element has 
jeri tied the au t h o r i z e d ide ntit'ication of said R FID t r an sp ond e r . 

. All inLcrmation management and secur ity .-iystem comprising: ^ . ' 

first securirjy badge inclviJiutj a transponder, a mass memory and an .input /output:' 
: ircuit; \' 

cir^;v. c ranscei^/er to wirelessly send and receive signals do and from o<^3d ,.:ir3t 
:';anspctider, .?aid firts I: transceiver to . continuously transmit . a broadcast rsignal 
=::til receiving a response from 3aid first sec urity badge and then,, upon receipt' :>f 
\id response,' said transceiver to receive a first authorization code from said,?' 
-■■ vrst security badge and to store a record of the receipt of 'ihe alithorization 

. first terminal device.- connected td And activated by said first transceiver- 

. second ' secur ity badge including a transponder, a mass memory and -an input /o.acpu.t 
'.evice; ' 

.' >Tecond cransceiver to send and receive signals to and from said seconj R FID 
; /aj":spr>nder , said second transceiver to continuously transmit , a broadcast signal 
until receiving a response from said second security badge and then, upon receipt 
wf said response, said second transceiver to receive a second authorization code 
vfron'said second security badge and to store a record of the receipt ocf the 
. aithoxization .cde; 

second terminal device connected to and activated by said cransceiver; and 

.1 host network element in communication with said first transceiver and said second 
transceiver, said host network element to receive the first authorization code from 
::he first transceiver and the second authorization code from the second transceiver 
-nnd compare the first and second authorization codes with at least one host 
authorization -:ode, said host network element to send a first verification code co 
■::he first transceiver upon verification of the first authorization code and to send 
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a second verification code to the second transceiver upon verification of the 
second authorization code. 

28. A method of securing access to a terminal device, said method comprising the 
steps of : 

providing an authorized user with a security badge which includes a personal 
computer card, a read/write transponder, a mass memory and a input/output data 
circuit, said transponder electronically storing an identification code; and 

associating a transceiver with said terminal device, said transceiver being 
operable to communicate with said terminal device; 

wherein said authorized user gains access to said terminal device by: 

(a) bringing said security badge within a selected distance of said transceiver, 
:jaid security badge located so that it is Hot physically visible so that said 
'.:ran spender is not within line -of -sight with said transceiver; 

(b) transmitting an interrogation signal from said transceiver; 

(c) receiving 3aid interrogation signal at said securit y badge and storing said 
interrogation signal within a charge storage device within said security badge; 

(d) trans'.Tiit ting said identification code from said security badge to said 
transceiver. vherein the transmitting is powered by energy derived from said charge 

r;torcig(r device; v , . , . 

(e) ^receiving said identification code at said transceiver; and 

' f ^ verify •■ ng 3 aid identi fic ation code; w he r e x n . ;?1 1 e p s ( b ) - ( f ) are p eriic rmr^ d w j t ho.i ) c 
laid vransp/:o.J'-:r being physically visible. . £ - 

A u'.et.'iod -t^ securely comm inicatino an format ion between %wo locations; ' '-^^^r^,- 
i:.ompris;*.ng : : - ■ >; 

requesting "r: Information transfer from a first location uo a second .'.ocat ipn;^J; 

-.nterrogatiiig a radio frequency identification ( RFID ) transponder a.t said serpn'^ 
/.ocrt.:l-:,ro; from *>i radio frequency (RF) transceiver at said c?econd location; 

transmit ting an identification code from said RFID transponder at s-aid- second- ■ - 
'.ocation t-rT'iaid RF hransceiver at the said second location; 

:ransmitLing said identificatioa code from said second Iccation ::o .a third 
location, said third location remote from said first and second locations; 

:;omparir:^ the auchorization of said identification code with authorized 
identification codes stored in memory at said third location; 

c'ommunicating ail; auc^^^^ signal from said third location; and 

transmitting t:he requested .'.nformation in packets to said second location after the 
authorization in ve rified, -each of the packets of information including a header, 
::he information to be transferred and a footer wherein the header includes an 
identif ication number for a user af the first location, an identification number 
•■or a receiver at the second location, a date/time stamp and a location stamp. 

"2. A metliod of securely communicating information between two locations 
rjomprising : 
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requesting an information transfer from a first location to a second locations- 
interrogating a radio frequency identification ( " RFID " ) transponder at said first 
location from a radio frequency ("RF") transceiver at said first location; 

transmitting an identification code from said RFID transponder at said first 
location to 3aid RF transceiver at said first location; . 

. trappniittirg said identification code from said firr.t location- tc a th-ird 1 or-ar-i rr?.. 
said third location remote from said first and second loccttions; 

comparing the. authorization of said identification code with authorized 
identification codes stored in a memory ut said third location; 

commimicating a:.:, anthori^^ation signal from said third location; and 

transmit*-. v-t'.7 -he requested information in packets to said second location afuer the 
authorization is verified, each of the packets of information including a header, 
the information to be transferred and a footer wherein the header includes an 
identification number for a user at the first location, a n identification number 
;:or a receive.\-<Ht the second location, a date/time stamp and a location stamp. 

33.. A method according to claim 32, wherein the step of transmitting the requested 
;'.nf-oimat.i..r;n to said .second Icication after- the authorization is verified, comprises 
\he 3tep& f : r 

• Torino :V:e informrv.lon j.'equested for transfer in mem--ry/ .x. . 

■Aterrogatinc, >. :,:Md:l o frequency identi ';:'.cation ( "R FID ) . transponi'fsr a^: said, -fecpnd 
::.::catf.i,c'>,0: from a radio frequency ("RF"; cransceiv^r ac t>;did second ipca.tion; ; 

...raAsmitt.Tpg an^i^'-vT^'ificatJon code from L-aid i?.FID tr^ifisppnder v.v ::aid seccr.id-;^^ 
\oc-i>,U.\^ t^*' . ■! ,:C? v'Jdnsceiver at said second location; 'i . ^'v.t- f-,^!- ■ ' 

.'.omparing ':ne authorization of said identification code with authorized - {y. 

.'.dentif i.-*=.uion .ies scored \n nemory; and * - j r.r 

•irarfsmitting 'the. ;:e'juested information to . saiTd second location after che 
.mthoiizarion of xhe' identi fica tion code dZ ■"he RFID transponder ..>t the seronei 
location i^ yerj.fied. 

.'M. A met;;.rd according to claini 33, whereixi the step of transmitting the requested 
Information tb. said isecond location after the authorization of the identificati on . 
;--)de of tne RF ID :ransponder at the second locacion is' verified, comprises +:he step - 

.-.ransmitt'ing the requested information to a terminal device it said second 
:.tocation.^ said terminal device being in communication with said RF transceiver at 
'i;add second loc*3.tion. 

:j3. A method according to claim 32, wherein the method further ro.rprises the Jteps 

./:icrypting the identification code transmitted from said R?1D transponder; and 
aecrynpt:! :.'*•: the identification code at said RF transceiver. 
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